diff --git a/Pkgfile b/Pkgfile
index b3d6dbe3f..9500d3c99 100644
--- a/Pkgfile
+++ b/Pkgfile
@@ -102,6 +102,8 @@ vars:
   kspp_sha256: 6fa575bd4049fb2a393008d267815fec8bc27162f09147534974b0197231db04
   kspp_sha512: 1befd930ca0e43acb049f3ffac584e9a13c0ef716abba0670eb976e1b6bcee3f833b2b16cb02ac193c33c3fbbeb6ff221394f4265f5b0d4b8e65488a530b0d0a
 
+  # Keep 6.18.34 aligned with the deployed amt-kmod vermagic. Its numbered CDN
+  # tarball was removed, so the build uses the hash-pinned stable.git snapshot.
   # renovate: datasource=git-tags extractVersion=^v(?<version>.*)$ depName=git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
   linux_version: 6.18.34
   linux_sha256: 840c8de08267447a3bdd5fdd14496c7b70f1e7157d9feebac78fddfad37f623f
diff --git a/kernel/prepare/pkg.yaml b/kernel/prepare/pkg.yaml
index 59c8db279..93eb875ff 100644
--- a/kernel/prepare/pkg.yaml
+++ b/kernel/prepare/pkg.yaml
@@ -6,6 +6,8 @@ dependencies:
   - image: "{{ .LLVM_IMAGE }}:{{ .TOOLS_REV }}"
 steps:
   - sources:
+      # The 6.18.34 cdn.kernel.org release tarball is no longer available.
+      # Snapshot content is accepted only when both hashes match the reviewed pin.
       - url: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/snapshot/linux-{{ .linux_version }}.tar.gz
         destination: linux.tar.gz
         sha256: "{{ .linux_sha256 }}"